Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File:                     hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier:          vuVDlMvjy9gyAy6WSgqVVLYG6o5l7B9iR4rdgccmDLA=
Subject key identifier:   A2:D2:83:9C:55:0E:79:D4:A1:58:41:64:38:52:80:A0:08:ED:00:A5
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer:       /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial:       019F92ECDC85D299E95091B096A55D847F99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 07:00:24 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:24 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:24 +0000
Files and hashes:         1: 4sjyq3qhVZlOGoiUzGF4lAOm0Ms.roa (hash: snRHhhCF/A70W64B8Ansk4wih7fxueYm9qlqzv1rXXE=)
                          2: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
                          3: Ncp12bGOlnl7zeDP17e5hwwIiXs.roa (hash: 8U+DuszR+o7r4oyJP5qAPzyleDSPshxobLvejlTQgog=)
                          4: OMs3SExnh8q-OfFFrIMvJ4V20rM.roa (hash: 3VJ0PQELJEdphYzfdK0KvVfZHKT8gZroOq8apM3LPBE=)
                          5: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
                          6: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: EspHdOQKx4kTxy31CE/+hCyH6nyg9WqDgLb6BtuKVdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:dc:85:d2:99:e9:50:91:b0:96:a5:5d:84:7f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
        Validity
            Not Before: Jul 24 07:00:24 2026 GMT
            Not After : Jul 25 07:00:24 2026 GMT
        Subject: CN=a2d2839c550e79d4a1584164385280a008ed00a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:52:c1:41:e9:ba:a5:dc:87:8a:51:68:b0:
                    eb:00:12:d1:35:fc:0f:21:bc:73:c7:d8:66:1e:de:
                    ca:0a:b4:d7:8e:a0:0f:8e:49:ef:03:d4:c7:0d:51:
                    7e:16:73:77:4b:01:c4:ab:3e:26:a1:2b:fb:42:64:
                    d2:58:03:06:b6:cc:50:42:64:be:cc:a1:9b:15:2f:
                    77:17:07:c1:fc:2e:5b:20:75:d6:81:cc:fb:6c:3f:
                    a8:eb:bd:8b:e1:03:b5:23:b7:fd:1b:fe:14:bf:c8:
                    73:1b:a1:e6:6d:02:30:90:6a:27:c7:ee:8e:0d:8d:
                    3f:b9:eb:65:b4:19:66:94:09:ff:bd:93:f0:0c:f6:
                    79:c8:ce:42:d7:7b:93:9a:5d:86:3b:9f:1b:46:2d:
                    9f:79:7d:55:2e:b5:53:7d:90:42:17:04:cd:9e:b8:
                    b7:62:ca:b7:b5:09:c4:f3:35:e7:c1:9f:59:63:09:
                    eb:3c:ef:4c:d5:a6:12:62:b6:59:b4:a7:37:d3:1f:
                    e2:c0:03:ec:58:76:a6:e6:1f:f1:a7:22:87:fd:33:
                    b9:90:4f:09:33:bc:83:9d:e0:14:35:39:d1:41:4e:
                    5d:c4:dc:45:a5:84:4d:ee:c8:f6:ed:6f:6d:42:04:
                    15:4e:a6:7c:23:9a:66:81:65:3c:2e:95:9e:6d:28:
                    77:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D2:83:9C:55:0E:79:D4:A1:58:41:64:38:52:80:A0:08:ED:00:A5
            X509v3 Authority Key Identifier:
                keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:07:a9:a4:59:5e:ae:37:9a:b1:54:0f:8e:5f:7d:7d:d0:98:
         95:0d:c1:f5:83:ab:74:15:01:29:f1:21:af:a1:1e:eb:ea:6f:
         06:af:cf:b3:10:ef:ca:8e:94:0a:ea:fe:7a:66:5f:73:07:d3:
         32:09:5f:cb:d2:41:af:c8:82:eb:e8:39:38:fc:de:77:d8:01:
         f0:c3:72:a5:0f:9f:ee:b6:80:31:c1:e5:ea:81:6c:d4:9f:77:
         81:97:0a:f3:19:0f:23:c5:ca:cd:4b:74:37:05:7a:59:3d:07:
         41:6e:54:0f:da:4e:f6:56:f3:19:81:3e:9b:c6:b7:0a:cf:f9:
         5b:f4:e9:59:d2:1a:0a:3e:bc:05:d7:58:a5:7e:f4:0c:d7:fa:
         74:fe:f2:f5:1b:65:c8:71:f2:7e:af:44:88:39:7b:68:89:c4:
         5d:ec:e3:86:cb:60:1f:5c:50:f2:72:24:0a:0b:70:a4:ba:55:
         d1:66:d4:27:c3:72:65:d6:36:fd:5a:20:b5:cb:b6:28:af:50:
         a7:ea:5c:d2:1b:d2:af:8b:6d:10:08:30:f6:08:2e:4d:8b:31:
         46:03:cf:96:c5:f1:d1:3b:a9:e4:7a:cf:7c:e8:71:87:94:71:
         4d:8f:1f:04:a0:78:37:60:ff:e1:1b:21:dd:74:5e:39:15:93:
         fa:74:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:19:13 2026 by rpki-client